Contents
What happens if a private key is stolen?
If the private key is stolen, a hacker can create a Man-In-the-Middle attack where data flowing either from the server-to-client or client-to-server is modified in-transit.
What if someone knows your private key?
If someone has accessed your private key it they have the ability to access any device or encrypted file that was protected with your public key. It also means that they can sign things on your behalf it is VERY bad if someone has gained access to your private key.
How would your private key be compromised?
A private key is compromised when an unauthorized person obtains the private key or determines what the private key is that is used to encrypt and decrypt secret information. You can subsequently generate a new key pair and obtain a new certificate for the public key.
What happens when your private key is compromised?
You can probably see where this is going. When a private key is compromised and a digital signature is applied to malware it tricks the browser filters and antivirus programs that typically scan downloads.
Do you have to revoke the trust in a compromised certificate?
To counter this harm, it is necessary to revoke the trust in the compromised key. This means that verifiers — browsers and other TLS clients (and servers, for client certificates) — must stop trusting the compromised key; until this is done no certificate from that CA can be trusted.
What happens to a certificate if it is stolen?
After that is done, reissuing all certificates that were affected and still valid. A problem if this is not mitigated soon after the key is stolen is that the lost reputation of a malicious certificate causes a CA to go out of business. Like diginotar did.
What happens if I Lose my Trust wallet?
Meaning, all private keys are derived from that 12-Word Recovery Phrase. If you lost the Recovery Phrase, you loose access to your wallet. Keep in mind that in the event your phone is broken, stolen, lost or the app is deleted accidentally, Trust Wallet never has access to your funds or the associated 12-Word Recovery Phrase.